ALT-BU-2023-2206-1
Branch sisyphus update bulletin.
Closed vulnerabilities
Modified: 2024-09-24
BDU:2022-07153
Уязвимость обработчика JavaScript-сценариев V8 браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
Modified: 2023-12-26
BDU:2022-07256
Уязвимость компонента Blink Media браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
Modified: 2023-12-26
BDU:2022-07258
Уязвимость IPC-библиотеки Mojo браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
Modified: 2023-12-26
BDU:2022-07315
Уязвимость компонента Blink Frames браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
Modified: 2023-12-26
BDU:2022-07321
Уязвимость компонента Profiles браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
Modified: 2023-12-26
BDU:2023-00071
Уязвимость функции Overview Mode браузера Google Chrome, позволяющая нарушителю выполнить произвольный код
Modified: 2024-12-16
BDU:2023-00166
Уязвимость сетевой службы браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю выполнить произвольный код
Modified: 2023-12-26
BDU:2023-00533
Уязвимость реализации всплывающих окон с запросом на разрешение браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
Modified: 2025-02-07
BDU:2023-00534
Уязвимость реализации прикладного программного интерфейса File System браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю обойти ограничения безопасности
Modified: 2023-02-15
BDU:2023-00537
Уязвимость механизма «Downloads» («Загрузки») браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю обойти ограничения безопасности
Modified: 2025-10-24
CVE-2022-4262
Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- https://chromereleases.googleblog.com/2022/12/stable-channel-update-for-desktop.html
- https://crbug.com/1394403
- https://chromereleases.googleblog.com/2022/12/stable-channel-update-for-desktop.html
- https://crbug.com/1394403
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-4262
Modified: 2024-11-21
CVE-2022-4436
Use after free in Blink Media in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- https://chromereleases.googleblog.com/2022/12/stable-channel-update-for-desktop_13.html
- https://crbug.com/1383991
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
- https://chromereleases.googleblog.com/2022/12/stable-channel-update-for-desktop_13.html
- https://crbug.com/1383991
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
Modified: 2024-11-21
CVE-2022-4437
Use after free in Mojo IPC in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- https://chromereleases.googleblog.com/2022/12/stable-channel-update-for-desktop_13.html
- https://crbug.com/1394692
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
- https://chromereleases.googleblog.com/2022/12/stable-channel-update-for-desktop_13.html
- https://crbug.com/1394692
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
Modified: 2024-11-21
CVE-2022-4438
Use after free in Blink Frames in Google Chrome prior to 108.0.5359.124 allowed a remote attacker who convinced the user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- https://chromereleases.googleblog.com/2022/12/stable-channel-update-for-desktop_13.html
- https://crbug.com/1381871
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
- https://chromereleases.googleblog.com/2022/12/stable-channel-update-for-desktop_13.html
- https://crbug.com/1381871
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
Modified: 2024-11-21
CVE-2022-4440
Use after free in Profiles in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
- https://chromereleases.googleblog.com/2022/12/stable-channel-update-for-desktop_13.html
- https://crbug.com/1382761
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
- https://chromereleases.googleblog.com/2022/12/stable-channel-update-for-desktop_13.html
- https://crbug.com/1382761
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
Modified: 2025-05-05
CVE-2023-0128
Use after free in Overview Mode in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html
- https://crbug.com/1353208
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
- https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html
- https://crbug.com/1353208
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
Modified: 2025-05-05
CVE-2023-0129
Heap buffer overflow in Network Service in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page and specific interactions. (Chromium security severity: High)
- https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html
- https://crbug.com/1382033
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
- https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html
- https://crbug.com/1382033
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
Modified: 2025-03-20
CVE-2023-0130
Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)
- https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html
- https://crbug.com/1370028
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
- https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html
- https://crbug.com/1370028
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
Modified: 2025-03-20
CVE-2023-0131
Inappropriate implementation in in iframe Sandbox in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to bypass file download restrictions via a crafted HTML page. (Chromium security severity: Medium)
- https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html
- https://crbug.com/1357366
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
- https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html
- https://crbug.com/1357366
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
Modified: 2025-03-20
CVE-2023-0132
Inappropriate implementation in in Permission prompts in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to force acceptance of a permission prompt via a crafted HTML page. (Chromium security severity: Medium)
- https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html
- https://crbug.com/1371215
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
- https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html
- https://crbug.com/1371215
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
Modified: 2025-03-20
CVE-2023-0133
Inappropriate implementation in in Permission prompts in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to bypass main origin permission delegation via a crafted HTML page. (Chromium security severity: Medium)
- https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html
- https://crbug.com/1375132
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
- https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html
- https://crbug.com/1375132
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
Modified: 2025-05-05
CVE-2023-0134
Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via database corruption and a crafted HTML page. (Chromium security severity: Medium)
- https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html
- https://crbug.com/1385709
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
- https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html
- https://crbug.com/1385709
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
Modified: 2025-05-05
CVE-2023-0135
Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via database corruption and a crafted HTML page. (Chromium security severity: Medium)
- https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html
- https://crbug.com/1385831
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
- https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html
- https://crbug.com/1385831
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
Modified: 2025-05-05
CVE-2023-0136
Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to execute incorrect security UI via a crafted HTML page. (Chromium security severity: Medium)
- https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html
- https://crbug.com/1356987
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
- https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html
- https://crbug.com/1356987
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
Modified: 2025-05-05
CVE-2023-0137
Heap buffer overflow in Platform Apps in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
- https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html
- https://crbug.com/1399904
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
- https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html
- https://crbug.com/1399904
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
Modified: 2025-05-05
CVE-2023-0138
Heap buffer overflow in libphonenumber in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)
- https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html
- https://crbug.com/1346675
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
- https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html
- https://crbug.com/1346675
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
Modified: 2024-11-21
CVE-2023-0139
Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass download restrictions via a crafted HTML page. (Chromium security severity: Low)
- https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html
- https://crbug.com/1367632
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
- https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html
- https://crbug.com/1367632
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
Modified: 2024-11-21
CVE-2023-0140
Inappropriate implementation in in File System API in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. (Chromium security severity: Low)
- https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html
- https://crbug.com/1326788
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
- https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html
- https://crbug.com/1326788
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
Modified: 2025-03-20
CVE-2023-0141
Insufficient policy enforcement in CORS in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)
- https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html
- https://crbug.com/1362331
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
- https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html
- https://crbug.com/1362331
- https://security.gentoo.org/glsa/202305-10
- https://security.gentoo.org/glsa/202311-11
Package kernel-image-std-def updated to version 5.15.88-alt1 for branch sisyphus in task 313468.
Closed vulnerabilities
Modified: 2025-08-19
BDU:2023-01200
Уязвимость реализации протокола Upper Level Protocol (ULP) ядра операционной системы Linux, позволяющая нарушителю повысить свои привилегии, выполнить произвольный код или вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2023-0461
There is a use-after-free vulnerability in the Linux Kernel which can be exploited to achieve local privilege escalation. To reach the vulnerability kernel configuration flag CONFIG_TLS or CONFIG_XFRM_ESPINTCP has to be configured, but the operation does not require any privilege. There is a use-after-free bug of icsk_ulp_data of a struct inet_connection_sock. When CONFIG_TLS is enabled, user can install a tls context (struct tls_context) on a connected tcp socket. The context is not cleared if this socket is disconnected and reused as a listener. If a new socket is created from the listener, the context is inherited and vulnerable. The setsockopt TCP_ULP operation does not require any privilege. We recommend upgrading past commit 2c02d41d71f90a5168391b6a5f2954112ba2307c
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2c02d41d71f90a5168391b6a5f2954112ba2307c
- https://kernel.dance/#2c02d41d71f90a5168391b6a5f2954112ba2307c
- https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html
- https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2c02d41d71f90a5168391b6a5f2954112ba2307c
- https://kernel.dance/#2c02d41d71f90a5168391b6a5f2954112ba2307c
- https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html
- https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
- https://security.netapp.com/advisory/ntap-20230331-0006/
Closed vulnerabilities
Modified: 2024-09-13
BDU:2022-02940
Уязвимость системы управления базами данных Redis, связанная с ошибками разыменования указателей, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-09-13
BDU:2022-02945
Уязвимость системы управления базами данных Redis, позволяющая нарушителю выполнить произвольный код
Modified: 2024-11-21
CVE-2022-24735
Redis is an in-memory database that persists on disk. By exploiting weaknesses in the Lua script execution environment, an attacker with access to Redis prior to version 7.0.0 or 6.2.7 can inject Lua code that will execute with the (potentially higher) privileges of another Redis user. The Lua script execution environment in Redis provides some measures that prevent a script from creating side effects that persist and can affect the execution of the same, or different script, at a later time. Several weaknesses of these measures have been publicly known for a long time, but they had no security impact as the Redis security model did not endorse the concept of users or privileges. With the introduction of ACLs in Redis 6.0, these weaknesses can be exploited by a less privileged users to inject Lua code that will execute at a later time, when a privileged user executes a Lua script. The problem is fixed in Redis versions 7.0.0 and 6.2.7. An additional workaround to mitigate this problem without patching the redis-server executable, if Lua scripting is not being used, is to block access to `SCRIPT LOAD` and `EVAL` commands using ACL rules.
- https://github.com/redis/redis/pull/10651
- https://github.com/redis/redis/releases/tag/6.2.7
- https://github.com/redis/redis/releases/tag/7.0.0
- https://github.com/redis/redis/security/advisories/GHSA-647m-2wmq-qmvq
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J4ZK3675DGHVVDOFLJN7WX6YYH27GPMK/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VPYKSG7LKUJGVM2P72EHXKVRVRWHLORX/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WSTPUCAPBRHIFPSCOURR4OYX4E2OISAF/
- https://security.gentoo.org/glsa/202209-17
- https://security.netapp.com/advisory/ntap-20220715-0003/
- https://www.oracle.com/security-alerts/cpujul2022.html
- https://github.com/redis/redis/pull/10651
- https://github.com/redis/redis/releases/tag/6.2.7
- https://github.com/redis/redis/releases/tag/7.0.0
- https://github.com/redis/redis/security/advisories/GHSA-647m-2wmq-qmvq
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J4ZK3675DGHVVDOFLJN7WX6YYH27GPMK/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VPYKSG7LKUJGVM2P72EHXKVRVRWHLORX/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WSTPUCAPBRHIFPSCOURR4OYX4E2OISAF/
- https://security.gentoo.org/glsa/202209-17
- https://security.netapp.com/advisory/ntap-20220715-0003/
- https://www.oracle.com/security-alerts/cpujul2022.html
Modified: 2024-11-21
CVE-2022-24736
Redis is an in-memory database that persists on disk. Prior to versions 6.2.7 and 7.0.0, an attacker attempting to load a specially crafted Lua script can cause NULL pointer dereference which will result with a crash of the redis-server process. The problem is fixed in Redis versions 7.0.0 and 6.2.7. An additional workaround to mitigate this problem without patching the redis-server executable, if Lua scripting is not being used, is to block access to `SCRIPT LOAD` and `EVAL` commands using ACL rules.
- https://github.com/redis/redis/pull/10651
- https://github.com/redis/redis/releases/tag/6.2.7
- https://github.com/redis/redis/releases/tag/7.0.0
- https://github.com/redis/redis/security/advisories/GHSA-3qpw-7686-5984
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J4ZK3675DGHVVDOFLJN7WX6YYH27GPMK/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VPYKSG7LKUJGVM2P72EHXKVRVRWHLORX/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WSTPUCAPBRHIFPSCOURR4OYX4E2OISAF/
- https://security.gentoo.org/glsa/202209-17
- https://security.netapp.com/advisory/ntap-20220715-0003/
- https://www.oracle.com/security-alerts/cpujul2022.html
- https://github.com/redis/redis/pull/10651
- https://github.com/redis/redis/releases/tag/6.2.7
- https://github.com/redis/redis/releases/tag/7.0.0
- https://github.com/redis/redis/security/advisories/GHSA-3qpw-7686-5984
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J4ZK3675DGHVVDOFLJN7WX6YYH27GPMK/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VPYKSG7LKUJGVM2P72EHXKVRVRWHLORX/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WSTPUCAPBRHIFPSCOURR4OYX4E2OISAF/
- https://security.gentoo.org/glsa/202209-17
- https://security.netapp.com/advisory/ntap-20220715-0003/
- https://www.oracle.com/security-alerts/cpujul2022.html